CVE-2010-0790

Published: Mar 10, 2010Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.

Affected (1)

Products: Ncpfs: Ncpfs

Ncpfs

1 product

Ncpfs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ncpfs Ncpfs	Version 2.2.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2010/Mar/122

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/509893/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/509894/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/38563

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html